services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      DOMAIN: ${DOMAIN}
      DATABASE_URL: mysql://vaultwardenuser:${MARIADB_PASSWORD}@localhost:3306/vaultwarden
      ADMIN_TOKEN: ${VAULTWARDEN_ADMIN_TOKEN}
      SIGNUPS_DOMAINS_WHITELIST: uni-bremen.de
      SIGNUPS_ALLOWED: false
      SMTP_HOST: "mailhost.neurotec.uni-bremen.de"
      SMTP_SECURITY: "force_tls"
      SMTP_PORT: 465
      SMTP_FROM: "vaultwarden@neuro.uni-bremen.de"
      SMTP_FROM_NAME: "Vaultwarden @ University of Bremen"
      SMTP_USERNAME: ${EMAIL_USERNAME}
      SMTP_PASSWORD: ${EMAIL_PASSWORD}
      SMTP_AUTH_MECHANISM: "Plain"
      SMTP_TIMEOUT: 15
      SMTP_ACCEPT_INVALID_CERTS: true
      SMTP_ACCEPT_INVALID_HOSTNAMES: false
      SMTP_DEBUG: false
      SIGNUPS_VERIFY: true
      INVITATIONS_ALLOWED: false
      EMAIL_CHANGE_ALLOWED: false
    volumes:
      - "vaultwarden_vol:/data"
      - "/mariadb_socket:/run/mysqld"
    ports:
      - 11001:80
    network_mode: bridge

  nginx:
    image: nginx:stable-alpine
    container_name: nginx
    restart: always
    volumes:
      - "/root/nginx/key.pem:/certs/nginx_key.pem:ro"
      - "/root/nginx/ca.pem:/certs/nginx_certificate.pem:ro"
      - "/root/nginx/nginx.conf:/etc/nginx/nginx.conf:ro"
    ports:
      - "0.0.0.0:443:443"
      - "0.0.0.0:80:80"
    environment:
      NGINX_WORKER_PROCESSES: "4"
      NGINX_WORKER_CONNECTIONS: "768"
    network_mode: bridge

volumes:
  vaultwarden_vol: